PCI SSCPCI DSSMonitoring TestingEASYFree question
What is the purpose of audit trails under PCI DSS?
- A.To verify that all payment applications are free of known vulnerabilities and confirm that each release was approved by a change control board
- B.To record and link all access to system components and cardholder data to individual users for accountability and forensic investigation
- C.To detect all unauthorized wireless access points and alert personnel at least once every three months
- D.To encrypt all stored account data and rotate the keys protecting it at the end of each cryptoperiod
Why B is correct
Audit trails provide a chronological record of system activities, enabling reconstruction of events, detection of unauthorized access, and forensic investigation of security incidents involving cardholder data.
Know someone studying for PCI DSS? Send them this one.